feat(audit): add global audit logging interceptor

[yugomania]

closes #95
Automatically persists masked records of state-mutating requests (POST/PUT/PATCH/DELETE) into the existing PostgreSQL audit trail via AuditService, capturing actor identity, method, path, client IP, masked request body and the final response status code.

Summary

Type of change

• Bug fix
• New feature
• Refactor / cleanup
• Documentation
• CI / tooling

Related issue

Closes #

Checklist

• npm run build passes
• npm test passes
• npm run lint passes
• npm run typecheck passes
• No secrets added to tracked files
• PR description explains the why, not just the what

[drips-wave]

@yugomania Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

[mergekeeper]

MergeKeeper review

Scope: in scope for linked issue #95.
Verdict: clean

The pull request successfully implements the comprehensive audit logging interceptor with proper masking, unit tests, and global integration as specified in issue #95.

Reviewed commit: 2ed597ff7938e6b2ac34aaf61828f7ec5bc0326a.
CI and merge eligibility are checked separately.

[mergekeeper]

Approved

The PR successfully implements the audit logging interceptor with proper data masking, request filtering, and error handling matching all linked issue criteria.

[mergekeeper]

MergeKeeper merge status

Status: blocked
PR state: open
Mergeability: mergeable
Checked commit: f7194b9242d793451253e4e402476f02737f64c2.

Reason:
GitHub pull request merge request failed with 405: 4 of 4 required status checks are expected.

Next steps:
This required status check is enforced directly by the repository's branch rules, independent of MergeKeeper's own CI evaluation — a maintainer merge override cannot bypass it unless MergeKeeper is authorized to.

1. Wait for the check to pass, or fix the underlying failure.
2. To let an explicit override bypass this check going forward, add the MergeKeeper GitHub App as a Bypass actor on the ruleset (Settings → Rules → Rulesets → the ruleset → Bypass list).

[mergekeeper]

Approved

The pull request successfully implements the comprehensive audit logging interceptor with proper masking, unit tests, and global integration as specified in issue #95.

[mergekeeper]

Merged

Merged with squash.